Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/eRseGjdrdmhwbkSBZKxB0m33F3w.roa
File: eRseGjdrdmhwbkSBZKxB0m33F3w.roa (raw, json)
Hash identifier: INQUxwci8H6DxEMq0plTrs15KLJKdv0g2V8npQ2+kC4=
Subject key identifier: 79:1B:1E:1A:37:6B:76:68:70:6E:44:81:64:AC:41:D2:6D:F7:17:7C
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01856DE640569849D4D573AD6857D4C8C27B
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/eRseGjdrdmhwbkSBZKxB0m33F3w.roa
Signing time: Sun 01 Jan 2023 15:14:44 +0000
ROA not before: Sun 01 Jan 2023 15:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12757
IP address blocks: 5.44.191.0/24 maxlen: 24
5.44.190.0/24 maxlen: 24
188.227.248.0/21 maxlen: 21
2a03:5880::/32 maxlen: 32
2a03:5880:104::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:40:56:98:49:d4:d5:73:ad:68:57:d4:c8:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Jan 1 15:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=791b1e1a376b7668706e448164ac41d26df7177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:01:8f:d5:1d:93:e8:3b:2d:bc:07:84:c1:
43:d6:b7:99:9d:69:2f:56:01:81:d9:e2:ae:46:46:
16:dc:fa:41:1b:dc:81:14:b4:b7:da:50:ef:7d:5e:
dd:ba:1e:40:ee:7b:7c:29:37:fe:8c:84:fa:32:0a:
bf:e6:d4:54:f7:9d:3f:69:34:1e:65:fb:34:21:80:
25:04:af:4c:41:fb:83:60:6b:88:ce:62:be:d3:d7:
f4:c4:d4:05:4c:eb:49:05:8f:0b:4c:c2:84:85:42:
67:7c:b0:c1:94:0c:7c:ba:5b:ba:a4:0d:1d:07:ef:
c4:27:22:d4:6c:f4:72:8c:18:35:09:17:da:19:31:
17:57:8e:c3:c6:46:35:47:62:56:5c:9a:52:8e:0f:
0b:13:ec:4f:98:13:18:34:0f:c0:a4:0f:4b:89:c7:
78:94:85:f3:e3:e0:fc:23:96:07:f4:cd:e7:e3:34:
bc:e7:26:b0:01:83:a2:c3:ee:f1:15:43:dc:9a:7c:
d4:35:2a:81:eb:7e:5b:9a:75:d1:5d:90:62:19:69:
b0:1e:c3:dc:7f:2c:44:54:f4:18:cf:e6:e4:91:e2:
b4:15:c2:91:4f:2b:1a:98:01:71:9a:9f:0a:32:70:
da:0f:99:70:79:f8:1f:e9:95:c8:a3:15:d3:14:63:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:1E:1A:37:6B:76:68:70:6E:44:81:64:AC:41:D2:6D:F7:17:7C
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/eRseGjdrdmhwbkSBZKxB0m33F3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.190.0/23
188.227.248.0/21
IPv6:
2a03:5880::/32
Signature Algorithm: sha256WithRSAEncryption
1e:11:9a:f9:a3:c9:25:59:5a:b3:01:5e:67:10:e5:54:32:c5:
8d:18:4a:c0:b6:f1:25:be:d5:f1:ce:fe:3a:57:46:39:70:c5:
08:5e:cc:e2:45:35:54:7b:d3:7f:3c:ea:5d:b1:a7:55:88:91:
f4:70:5b:5c:15:10:3e:d2:0f:08:e4:91:3f:2e:6f:7b:ed:55:
0f:a7:fc:64:f5:dc:93:52:bf:49:b7:88:e0:af:3c:e1:b5:5f:
e9:47:86:6b:4a:d1:bb:d7:42:ab:25:c6:c6:52:f1:b7:aa:81:
cb:01:4e:5d:1c:ca:14:0b:9b:b1:d5:b3:de:4b:13:a5:9f:11:
7b:22:9d:48:7b:59:52:35:1e:94:8e:d5:37:35:a4:44:51:d5:
68:04:35:1c:e9:8d:d9:42:f8:a4:ab:58:77:1e:84:ab:f5:94:
1c:2c:27:a8:5d:2b:92:8c:58:41:1e:fc:5f:bf:0e:d9:a6:43:
06:94:63:47:5e:25:fc:3d:e1:d6:de:96:65:7a:33:8e:2c:86:
4f:7b:f2:9f:3c:30:40:62:cc:14:88:40:ad:f1:c1:bf:64:09:
c4:54:be:67:52:b6:48:de:56:68:0b:4c:c5:9b:3b:78:16:0f:
38:07:8f:5d:2c:1a:f9:fe:00:95:8d:f1:94:ae:dd:cc:2c:47:
df:f4:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:46 2024 by rpki-client on console-ams.rpki-client.org